This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer File: mssomVmi7E-KKEGRVELMvTRCSTg.cer (raw, json) Hash identifier: vyJUY1MFysqa3FwKQbV3gCBF2Ne2azSjqie1PFWWl/o= Subject key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD9441E750D2158BB8C16A54FC4DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 148.88.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d9:44:1e:75:0d:21:58:bb:8c:16:a5:4f:c4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9acb289959a2ec4f8a2841915442ccbd34424938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:2f:88:b5:49:d3:7b:ae:ba:ba:77:74:8f: a5:88:a2:f8:34:a4:4c:ad:7d:5a:78:79:81:ea:b9: 45:1d:27:c2:c0:67:4e:d4:b0:86:77:09:0f:ef:67: 11:4a:17:0e:ac:ae:d7:01:4b:7e:f0:bc:35:19:db: c2:93:f0:53:d2:6b:3d:9c:20:34:a3:69:55:15:47: ba:09:6b:59:1a:72:54:d0:fb:d4:22:02:4b:63:96: 3b:8e:00:d7:ca:46:70:02:b2:7e:f2:65:b2:24:19: 73:02:52:33:9a:81:75:30:aa:f4:57:5b:78:0d:35: 13:b8:a9:27:15:4f:30:a4:f2:14:28:95:0e:c5:cf: d9:33:66:51:8c:0d:fd:59:1c:60:76:7a:7c:fb:f6: 47:7f:1c:61:a1:2e:3d:a2:4e:a9:0e:e6:11:80:6b: 11:1c:0f:65:ef:b7:fa:e5:68:36:19:a3:c7:c6:1e: 4a:3b:75:6f:17:f1:49:63:f8:97:69:a7:b1:64:d3: 1e:66:a0:8f:d6:10:4b:90:16:8d:47:bd:c3:0c:af: ce:bd:0c:f0:b8:e8:e5:96:20:48:74:0b:13:be:70: 70:09:84:a8:2f:2d:5f:66:aa:4b:eb:01:63:b8:98: d6:24:ac:5e:71:d7:4e:2a:f5:9f:70:8c:cb:81:04: a6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 25:52:08:1e:b6:9a:31:89:2b:eb:ec:63:a1:e1:ff:21:48:c8: d7:52:f7:28:f0:50:d0:85:12:15:1d:85:c1:a2:66:47:8c:4c: 63:bf:9a:b9:a8:be:ce:9f:43:17:79:d4:89:19:19:f5:ef:0a: e6:89:69:64:c8:05:a3:6a:a8:e2:33:e4:9a:ac:8f:e8:f0:f9: 21:56:5f:1e:28:65:9e:87:df:33:96:e2:ff:af:51:9d:ab:6d: ae:cc:47:6a:17:3e:9c:af:e7:b2:44:40:76:84:f9:ec:e5:fc: dd:46:44:53:b4:18:ec:93:f4:42:3e:c4:ce:a5:43:27:53:78: 7c:29:a0:42:e9:13:ed:c3:d8:a9:7d:4b:a6:7a:21:91:44:10: f5:e3:44:30:9e:bc:3d:e3:1e:21:e3:94:32:18:28:1f:67:cb: cf:0d:bd:22:34:d4:af:32:ef:c4:fa:d7:11:c3:75:b5:fa:ac: 84:47:28:54:3f:8c:db:37:78:c2:82:d6:02:0a:3c:81:e3:68: 07:e4:ac:5e:55:cc:b1:55:b0:b0:f8:30:9c:3e:1e:a4:f3:99: c3:e7:a5:85:1c:29:6c:8b:f4:56:51:e2:f7:bc:e4:26:3c:55: c5:d5:c4:bd:86:45:cb:8f:2a:6c:5e:23:07:d3:4c:15:8a:fb: 61:89:9e:aa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt6WtlEHnUNIVi7jBalT8TeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWNiMjg5OTU5YTJlYzRmOGEyODQxOTE1NDQyY2NiZDM0NDI0OTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK8viLVJ03uuurp3dI+liKL4NKRM rX1aeHmB6rlFHSfCwGdO1LCGdwkP72cRShcOrK7XAUt+8Lw1GdvCk/BT0ms9nCA0 o2lVFUe6CWtZGnJU0PvUIgJLY5Y7jgDXykZwArJ+8mWyJBlzAlIzmoF1MKr0V1t4 DTUTuKknFU8wpPIUKJUOxc/ZM2ZRjA39WRxgdnp8+/ZHfxxhoS49ok6pDuYRgGsR HA9l77f65Wg2GaPHxh5KO3VvF/FJY/iXaaexZNMeZqCP1hBLkBaNR73DDK/OvQzw uOjlliBIdAsTvnBwCYSoLy1fZqpL6wFjuJjWJKxecddOKvWfcIzLgQSmhwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFJrLKJlZouxPiihBkVRCzL00Qkk4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2FiMGRm MS1kZjRjLTQ4NzItOThjNS04NjRmZTNiYmRlZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvYWIwZGYx LWRmNGMtNDg3Mi05OGM1LTg2NGZlM2JiZGVmZC8xL21zc29tVm1pN0UtS0tFR1JW RUxNdlRSQ1NUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAlFgwDQYJKoZIhvcNAQELBQADggEBACVSCB62 mjGJK+vsY6Hh/yFIyNdS9yjwUNCFEhUdhcGiZkeMTGO/mrmovs6fQxd51IkZGfXv CuaJaWTIBaNqqOIz5Jqsj+jw+SFWXx4oZZ6H3zOW4v+vUZ2rba7MR2oXPpyv57JE QHaE+ezl/N1GRFO0GOyT9EI+xM6lQydTeHwpoELpE+3D2Kl9S6Z6IZFEEPXjRDCe vD3jHiHjlDIYKB9ny88NvSI01K8y78T61xHDdbX6rIRHKFQ/jNs3eMKC1gIKPIHj aAfkrF5VzLFVsLD4MJw+HqTzmcPnpYUcKWyL9FZR4ve85CY8VcXVxL2GRcuPKmxe IwfTTBWK+2GJnqo= -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:32 2026 by rpki-client